CVE-2026-47480

Uncaught Exception in NVIDIA Triton Inference Server Causes Denial of Service

View on CVE.org
Published Jul 14, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.

Analysis

AI-generated

Technical impact

NVIDIA Triton Inference Server for Linux contains a flaw that allows an attacker to trigger an uncaught exception during inference processing. This can cause the server to crash and become unavailable, compromising service availability but not directly exposing data or allowing code execution. The weakness corresponds to CWE‑248 handling oversight that leads to application instability.

Affected Systems

The vulnerability affects NVIDIA Triton affected releases are not enumerated in the advisory, so all current Linux builds may be susceptible until a patch is issued.

Risk and Exploitability

The CVSS score of 7.5 indicates a high impact rating for denial of service, while the EPSS score indicates a very low likelihood of exploitation and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves sending malicious or malformed inference requests over the network, allowing a remote attacker to trigger the exception.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑supplied patch or upgrade to the latest release of Triton Inference Server that corrects the exception handling flaw.
  • If no patch is available yet, limit external access to the inference endpoint to trusted clients only, and consider enforcing network segmentation or firewall rules to isolate the service.
  • Enable detailed logging to capture uncaught exception events and review logs regularly for anomalous request patterns to detect abuse.

Generated by OpenCVE AI on July 31, 2026 at 05:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Uncaught Exception in NVIDIA Triton Inference Server Causes Denial of Service
Type Values Removed Values Added
Title Uncaught Exception Causing Denial of Service in NVIDIA Triton Inference Server
Type Values Removed Values Added
Title Uncaught Exception Causing Denial of Service in NVIDIA Triton Inference Server
Type Values Removed Values Added
Title Denial of Service via Uncaught Exception in NVIDIA Triton Inference Server
Type Values Removed Values Added
Title Denial of Service via Uncaught Exception in NVIDIA Triton Inference Server
Type Values Removed Values Added
First Time appeared Nvidia
Nvidia triton Inference Server
Vendors & Products Nvidia
Nvidia triton Inference Server
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-248
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
Earlier changes (3)
Weaknesses

Sources

Status
PUBLISHED
Assigner
nvidia
Published
Updated
Jul 15, 2026, 2:12 PM
Reserved
May 19, 2026, 7:55 PM

View source JSON

Updated
Jul 15, 2026, 2:12 PM

JSON

Status
Deferred
Published
Jul 14, 2026, 8:17 PM
Modified
Oct 24, 2026, 9:10 PM

View source JSON

No data.

Updated
Jul 31, 2026, 5:15 AM

JSON